Privacy policy

Information we collect

We collect information you provide, such as your name, email address, company, project interests and messages, when you contact us, create an account or otherwise interact with Korzy. If you signed up for release updates in the past, we keep that signup and the consent you gave.

When you create an account or sign in, including when you connect Korzy to an AI assistant or agent, you authenticate through our sign-in provider, which processes your name, email address and sign-in details on our behalf. We store your account and organization details, plan, API key identifiers, credit balance and usage to provide the service.

Plan subscriptions and extra credits are billed through Stripe, which processes payment information. Korzy stores your plan, billing period, payment references, amounts, payment status and billing email. Payment-card details are entered with Stripe and are not stored by Korzy.

For report purchases, Stripe processes payment information. Korzy stores the purchased report and edition, payment references, amount, payment status and customer email to provide access and support. Payment-card details are entered with Stripe and are not stored in Korzy’s report order database. Purchasing a report does not add you to a marketing list.

We and our service providers may automatically collect technical and usage information, including IP address, browser and device details, pages requested, referring pages, approximate location derived from IP address, and timestamps. We use this information to deliver the website, troubleshoot issues, understand usage, and prevent abuse. When you create an account, we record the referring site and any campaign tags in the link you followed, so we can understand how people find Korzy.

When you use the Korzy API or MCP server, we log each request and our response: what you sent (such as addresses, coordinates, questions and tool arguments) and the data we returned, with the time, your account, the API key identifier and the client application. We use these logs for support, product quality and abuse prevention. They are kept for up to 90 days and are accessible only to Korzy staff. API key secrets and sign-in tokens are not stored in them.

Property records and owner information

Our parcel data comes from public property records published by counties and other public bodies. These records can include the names and mailing addresses of property owners, some of whom are individuals. We provide this information for property research by business customers, such as site selection, due diligence and real estate analysis.

Owner names and mailing addresses are available only to customer organizations that have opted in to owner data, and only through the API and MCP server. Other lookups, records and answers to questions do not return them. We do not use owner information to market to property owners.

If you want to see, correct or remove the owner information we hold about you, email support@korzy.co with the property address. We review each request and reply by email to tell you what we found and what we changed. Because the information comes from public records, a correction made at the county record is the most reliable way to fix it at its source.

How we use information

We use personal information to provide, maintain, secure, and improve our services; respond to inquiries; understand customer needs; develop products and research; send requested updates and relevant information about Korzy; manage business relationships; and protect our rights, enforce agreements, and meet legal obligations. Marketing communications are subject to your preferences and applicable law.

We may create and use aggregated or deidentified information for research, analytics, product development, and other lawful business purposes. We maintain that information in deidentified form and do not attempt to reidentify it except as permitted by law.

When we share information

We may share personal information with service providers that support our business, such as hosting, security, storage, communications, and professional advisers; with affiliated companies for the purposes described here; and when you direct us to do so or consent.

We may also disclose information when reasonably necessary to comply with law or legal process, protect the rights or safety of Korzy or others, investigate fraud or misuse, or in connection with a proposed or completed merger, financing, acquisition, reorganization, bankruptcy, or sale of some or all of our business or assets, subject to applicable protections.

We do not currently sell website visitor, account or signup information or share it for cross-context behavioral advertising.

Cookies and third-party services

Our website and service providers may use cookies or similar technologies for functionality and security. You can manage cookies through your browser settings; disabling them may affect some features.

The website uses Google Tag Manager and Google Analytics to measure site traffic. They set cookies in your browser and send usage information to Google, including the pages you view, device and browser details, and approximate location derived from your IP address. Google handles this information under its own privacy policy. You can block or delete these cookies in your browser settings, or install the Google Analytics opt-out browser add-on.

We also use Cloudflare Web Analytics, which counts page views and measures site performance without setting cookies.

Links, newsletter forms, and embedded media may connect you to services operated by others. Those services may collect information directly, including through cookies, under their own privacy policies. We are not responsible for their privacy practices.

The website does not currently change its behavior in response to a browser's Do Not Track signal. Where applicable law requires us to recognize an opt-out preference signal, we will do so.

Retention and security

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including maintaining business relationships, complying with legal obligations, resolving disputes, and enforcing agreements. Retention depends on the information, its use, and applicable requirements. API and MCP request logs are deleted after 90 days.

We use reasonable safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your choices and rights

You can stop marketing communications by using an unsubscribe option provided in a message or contacting us. We may still send nonmarketing communications, such as responses to your requests or service-related notices.

Depending on where you live and which laws apply, you may have rights to access, correct, delete, or receive a copy of personal information; object to or restrict certain processing; withdraw consent; or appeal a decision about a request. You may also have a right to complain to your local privacy regulator. Withdrawing consent does not affect prior lawful processing.

Contact us using the details below to make a request. We may need to verify your identity or an authorized agent's authority. Rights are subject to legal exceptions, and we may retain information where permitted or required by law. We will not unlawfully discriminate against you for exercising your rights.

International visitors

Korzy is based in the United States. Information may be processed in the United States and other countries where we or our providers operate, whose privacy laws may differ from those where you live. Where required, we use legally recognized safeguards for international transfers.

Where applicable law requires a legal basis, we rely on consent, performance of a contract, legal obligations, or legitimate interests such as operating, securing, and developing our business, subject to your rights and interests.

Children

Our services are intended for business users, not children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, contact us so we can take appropriate action.

Changes to this policy

We may update this policy as our business and practices change. We will post the updated version here and revise the date above. Where required by law, we will provide additional notice or obtain consent before making a material change.

Contact

Korzy, Inc.

For privacy questions or requests, email support@korzy.co.